Geohot mapped the Kernel RAM

Geohot attuale hacker conosciuto nel mondo iphone per il primo Jailbreak, qualche mese fà si è messo a lavoro sulla Ps3 riuscendo già a mappare il kernel della ram della nostra amata consolle, ecco il risultato:

The kernel:

c00000000xxxxxxx -> 0000408f92c94xxxxxxx

c: 0 l: 1 n: 0 kp: 1 ks: 0

c000000000000000 - c000000000f00000

vmalloc regions:

d00000000xxxxxxx -> 0000f09b89af5xxxxxxx

c: 0 l: 0 n: 0 kp: 1 ks: 0

d000000000000000 - d000000000004000

d000000000008000 - d00000000000c000

d000000000038000 - d000000000044000

d000000000048000 - d000000000054000

d00000000005c000 - d000000000074000

d000000000078000 - d0000000000a8000

d0000000000ac000 - d0000000000c0000

d0000000000c4000 - d000000000130000

d000000000134000 - d000000000140000

d000000000144000 - d000000000150000

d000000000154000 - d000000000164000

d000000000168000 - d000000000178000

d00000000017c000 - d00000000019c000

d0000000001a0000 - d0000000001f4000

d0000000001f8000 - d000000000208000

d00000000020c000 - d000000000224000

d000000000228000 - d00000000023c000

d000000000240000 - d000000000254000

d00000000025c000 - d000000000270000

d00000000027c000 - d0000000002d8000

d0000000002dc000 - d00000000032c000

d000000000330000 - d00000000033c000

d000000000340000 - d000000000430000

d000000000434000 - d000000000520000

d000000000524000 - d000000000558000

d00000000055c000 - d000000000598000

d00000000059c000 - d0000000005e0000

d0000000005e4000 - d000000000618000

d00000000061c000 - d000000000638000

d00000000063c000 - d00000000064c000

d000000000650000 - d000000000664000

d000000000668000 - d000000000678000

d00000000067c000 - d00000000068c000

d000000000690000 - d0000000006e4000

d0000000006e8000 - d000000000728000

d00000000072c000 - d00000000075c000

d000000000768000 - d000000000794000

d000000000798000 - d0000000007ac000

d0000000007b0000 - d0000000007f0000

d0000000007f4000 - d0000000008c4000

d0000000008c8000 - d000000000960000

d000000000964000 - d0000000009d4000

d0000000009d8000 - d0000000009f8000

d000000000a00000 - d000000000a1c000

d000000000a20000 - d000000000a2c000

d000000000a44000 - d000000000a50000

d000000000a58000 - d000000000abc000

d000000000ac0000 - d000000000b20000

d000000000b24000 - d000000000b3c000

d000000000b40000 - d000000000b60000

d000000000b64000 - d000000000b78000

d000000000b7c000 - d000000000bc0000

d000000000bc8000 - d000000000c48000

d000000000c4c000 - d000000000d3c000

d000000000d40000 - d000000000d68000

d000000000d6c000 - d000000000d90000

d000000000d94000 - d000000000d9c000

d000000000da0000 - d000000000da8000

d000000000db0000 - d000000000dc4000

d000000000dc8000 - d000000000df0000

d000000000df4000 - d000000000e10000

d000000000e14000 - d000000000e2c000

d000000000e30000 - d000000000e44000

d000000000e48000 - d000000000e60000

d000000000e64000 - d000000001014000

d000000001018000 - d00000000105c000

d000000001060000 - d000000001068000

d00000000109c000 - d0000000010c8000

d0000000010cc000 - d0000000010ec000

d000000001174000 - d0000000011d8000

d0000000011dc000 - d000000001224000

Bolted regions

f00000000xxxxxxx -> 0000dc19498bexxxxxxx

c: 1 l: 0 n: 0 kp: 1 ks: 1

f000000007aa8000 - f000000007aac000

f000000007ac4000 - f000000007acc000

f000000007b48000 - f000000007b4c000

f000000007ba4000 - f000000007bb0000

f000000007ecc000 - f000000007ed0000

f000000007f2c000 - f000000007f84000

f000000007f88000 - f000000007fac000

f000000007fb0000 - f000000007fd8000

f000000007fdc000 - f000000007fe4000

f000000007fec000 - f000000007ffc000

The HTAB

d00008008xxxxxxx -> 0000d3df8b595xxxxxxx

c: 1 l: 0 n: 0 kp: 1 ks: 1

Mappings in user area:

000000000xxxxxxx -> 0000dc19498bexxxxxxx

c: 1 l: 0 n: 0 kp: 1 ks: 1

0000000007aa8000 - 0000000007aac000

0000000007ac4000 - 0000000007acc000

0000000007b48000 - 0000000007b4c000

0000000007ba4000 - 0000000007bb0000

0000000007ecc000 - 0000000007ed0000

0000000007f2c000 - 0000000007f84000

0000000007f88000 - 0000000007fac000

0000000007fb0000 - 0000000007fd8000

0000000007fdc000 - 0000000007fe4000

0000000007fec000 - 0000000007ffc000

00000000fxxxxxxx -> 0000d3df8b595xxxxxxx

c: 1 l: 0 n: 0 kp: 1 ks: 1

000000004xxxxxxx -> 0000d1a140344xxxxxxx

c: 1 l: 0 n: 0 kp: 1 ks: 1

0000000040000000 - 000000004001c000

0000000040028000 - 0000000040034000

0000000040074000 - 00000000400a4000

UPDATE: Different Ps3 Motherboard

Come da titolo ecco la lista delle differenti schede madre montate sulle nostre Playstation 3:

• VERSIONE AMERICANA 40 GB [MODEL: CECHH ]

(NON POSSIEDE L'HARDWARE PS2)

• VERSIONE EUROPEA 60 GB - AMERICANA 80 GB [MODEL:CECHC ]

(POSSIEDE LA GPU PS2)

• VERSIONE NORD AMERICANA 20/60 GB [MODEL: CECHA]

(POSSIEDE CPU E GPU PS2)

• VERSIONE AMERICANA PS3 SLIM 120 - 250 GB

(NON POSSIEDE L'HARDWARE PS2)

Infine, ecco l'elenco dei codici di produzione di ogni scheda madre Playstation 3:

• CECHA: COK-001 1-871-868-22
• CECHA: COK-001 1-871-868-32
• CECHB: COK-001 1-871-868-22
• CECHC: COK-002 1-873-513-21
• CECHC: COK-002 1-873-513-31
• CECHG: SEM-001 1-875-384-21
• CECHH: DIA-001 1-875-938-11
• CECHH: DIA-001 1-875-938-31
• CECHK: ??? -002 1-876-912-32
• CECHL: VER-001 1-878-196-21
• CECHL: VER-001 1-878-196-31
• CECH-20xx: DYN-001 1-880-055-31

Ps3 Debug startup sequence explained

Un video dimostrativo di una Playstation 3 Debug che legge i backup dei giochi:


Al momento è possibile trovare in vendita solo pochissime unità della Playstation 3 debug, ecco alcuni link:
LINK1
LINK2

PlayStation 3 System File Editor

PlayStation 3 System File Editor è un programmino sviluppato da Hellcat che permette di modificare alcuni parametri della nostra Playstation 3, come:

1. L'ID;
2. La Versione;
3. Il livello di controllo parentale;
4. Il Titolo;
5. La risoluzione video;
6. Il formato audio;
7. Attivare o disattivare la riproduzione remota per PSP.